Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: D6U0nk5BmR3m9UTdOMU7YQqNUVXOk+NsQjp4qSvpbn4=
Subject key identifier: 43:CA:BE:0D:53:78:C9:98:81:4E:62:4E:34:25:8E:E3:79:EF:C3:08
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 019D28BB7275CD4D3CA1F4C8B862675A5E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 0622
Signing time: Thu 26 Mar 2026 06:01:06 +0000
Manifest this update: Thu 26 Mar 2026 06:01:06 +0000
Manifest next update: Fri 27 Mar 2026 06:01:06 +0000
Files and hashes: 1: Jg9UXomR67ddbwvE12iwfmdXVUY.roa (hash: erQTlvEuRH+/RugmpxhUl/Z+VWvMHHjTv7sIc+sSjyw=)
2: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: MmAkiKIgdM1MNIfkDarSf4k2zOPj/R+BkvnFd1jLCp8=)
3: uzGW5yZkWFK7XwuN3EgcKBBBYVY.roa (hash: iqNkpecefxjLtGeufMCzfpSJbAjOStGnY7fR2gXa7Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:72:75:cd:4d:3c:a1:f4:c8:b8:62:67:5a:5e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Mar 26 06:01:06 2026 GMT
Not After : Mar 27 06:01:06 2026 GMT
Subject: CN=43cabe0d5378c998814e624e34258ee379efc308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:88:d7:a3:6d:2e:2e:ba:01:5d:d4:34:ce:
f5:98:d3:2f:6a:bc:c3:2f:10:36:8d:ce:09:8b:0a:
d7:24:c6:d5:57:58:79:76:5f:79:85:d5:15:96:13:
7c:b4:83:3e:23:2d:88:b2:79:ef:d2:78:8b:84:89:
e2:f6:02:c9:62:f6:62:32:40:f8:0f:6a:b4:d6:0a:
2c:02:f7:72:86:95:bc:43:a9:f1:ac:3a:c0:75:c3:
1e:9a:dc:93:c2:41:bd:69:9b:60:b4:52:80:37:57:
ef:fc:5d:51:04:c0:4b:b0:38:71:a7:d7:e4:86:f1:
c1:79:ca:77:9c:9a:7c:45:28:66:58:fb:63:4a:7f:
a2:3a:80:d0:23:c3:a8:2d:82:61:06:df:3a:fb:b4:
1b:61:ec:87:3c:46:20:36:dd:bf:c8:39:b5:23:86:
10:13:1b:20:4f:38:76:48:22:bf:60:12:a9:ea:e3:
0c:7a:f0:73:b6:ff:4d:e6:3c:9f:bc:27:6c:6f:c7:
2b:5e:ce:2b:e2:3a:ea:b2:72:8a:45:b0:02:61:02:
36:e0:e0:15:08:43:77:ca:7a:11:ce:8c:37:87:93:
49:dc:2d:de:56:0f:0c:48:04:85:c1:8e:87:67:36:
87:09:1f:74:02:b9:ce:5a:60:1c:27:aa:23:95:39:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CA:BE:0D:53:78:C9:98:81:4E:62:4E:34:25:8E:E3:79:EF:C3:08
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:27:df:90:99:ce:7b:7f:80:de:c4:25:ba:7f:bc:8b:be:a5:
7b:ec:a5:1c:96:a2:95:b9:67:81:f0:cd:92:c1:1a:77:cb:4f:
b4:bc:03:46:27:33:3c:7c:c1:21:64:db:4b:6c:78:f0:2e:2e:
37:58:2c:e1:58:d8:e9:82:81:f2:73:6d:97:19:16:8e:d5:75:
f5:75:ab:7d:fa:04:7c:9a:98:50:9d:08:65:23:53:e4:9f:2b:
72:2f:86:29:df:eb:5b:64:31:fb:ea:b4:dc:ff:26:b8:df:38:
8d:cc:5c:e7:6a:6f:d3:c1:04:38:31:82:ca:70:0e:66:11:31:
9f:0d:e6:33:a1:6e:b6:72:bd:15:3f:2f:07:39:a2:1d:5e:49:
29:84:91:2e:f6:74:35:e4:be:4c:67:de:83:05:c1:6c:25:b8:
1d:65:f8:93:10:f8:35:aa:97:94:85:5c:41:d5:72:69:0c:89:
8e:8b:a1:35:5e:ac:25:2b:c7:81:04:8f:ce:f6:f1:87:3a:1c:
f3:a4:1e:62:f9:55:05:1c:ad:09:17:66:16:4d:41:74:1d:99:
cc:e8:5c:3c:54:45:f9:03:b0:0f:0b:97:2d:d7:9d:d4:fd:71:
7b:2f:5a:3b:9a:fc:09:80:60:36:eb:e5:69:a9:cf:4a:b7:79:
88:3a:79:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:14:26 2026 by rpki-client